Privacy Ref Blog by Tag

Tag "Notice" returned 17 posts

Growing up I spent a good amount of time at Radio Shack. I liked to “play” with electronics just to understand how things worked. It always bothered me that they asked for my zip code for every transaction, but they still got my money. That may be in part why I became a privacy professional.

I continued to visit the chain in recent years, mostly for batteries and replacement parts. How was I to know that, in spite of their privacy notice, Radio Shack would eventually try to sell my personal information during their bankruptcy. Continue reading this post…

Over the past few weeks I have been wearing my Google Glass in public. The experiences have been invaluable to my understanding of the privacy implications of wearable technology. Lately I have been giving some thought to the business policy challenges the technology presents. Continue reading this post…

Privacy professionals, including myself, have been warning of the dangers to privacy from wearable technology. The concerns I have been expressing have been based on reported product capabilities, anecdotal evidence, and published reports. So when I had the opportunity to join the Google Glass Explorer program, I jumped at the chance.Continue reading this post…

I am sure you have heard this several times since Scott McNealy, Sun’s CEO, first said it back in 1999, “You have zero privacy anyway. Get over it”. After 14 years it seems Americans haven’t gotten over it. A Pew Research study shows more people are concerned about the government’s surveillance than terrorism (Few See Adequate Limits on NSA Surveillance Program). The implication is that people are becoming more privacy aware. If this is the case, what does that mean for business?Continue reading this post…

Recently my wife and I have begun finding new doctors and dentists. While filling out the paperwork at each office we are being asked for our driver’s license numbers and I was not sure why. Also, being a privacy person, I read the privacy policies at these offices and sometimes had questions. So, much to my wife’s chagrin, I asked about these two items. Continue reading this post…

Cloud computing provides an opportunity for businesses to lower costs and increase their computing infrastructure’s flexibility. When utilizing a cloud service provider for additional storage, computing power, or a full application you should look into the privacy implications as these are multidimensional. Continue reading this post…

Last Friday it was revealed that reporters from Bloomberg News could retrieve information from the profiles of subscribers to Bloomberg’s data terminals as well as the subscribers’ system usage (NYT article here). While I agree with the characterization of this incident as a “mistake”, wasn’t this really a violation of basic privacy principles?Continue reading this post…

This weekend I was involved in an event that allowed me to see just how easy it is to find an individual given a minimum of personal information. I knew it would be easy, but how easy was the surprise. Continue reading this post…

My wife and I recently visited a major theme park and were surprised that our fingerprints were requested when we entered. While I understand the good business reason the fingerprints were requested, I remain dumbfounded why I could not find a privacy notice that disclosed how the information was being protected.Continue reading this post…

Deciding I needed a memory upgrade for my laptop, I went to the nearest Best Buy on the advice of another retailer. Things got a little complicated allowing me to spend about two and a half hours in the store. This gave me a chance me to see how this particular Geek Squad protected privacy. My experience with privacy and the Geek Squad had been very positive at another location, but this experience left some things to be desired.

On our last webinar (as of this writing) I discussed how a company can handle data subject’s rights requests under GDPR. Many of these requests are going to require attention, such as those ‘right to be forgotten’ requests. Others may seem daunting but can be handled easily and may not require any direct participation from your end.
Continue reading this post...